Welcome to ISAserver.org

Certificate Service installs on ISA or AD?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> General >> Certificate Service installs on ISA or AD?

Page: [1]

Message

<< Older Topic Newer Topic >>

Certificate Service installs on ISA or AD? - 21.Sep.2007 6:25:30 AM

ngu_tri

Posts: 7
Joined: 11.Sep.2007
Status: offline

Hi everyone

I have 4 questions about Certificate Service, because I am using ClearTunnel to stop SSL Hole

Question 1

Do I need to join ISA Server on AD Server?

If, yes --> it displays error "A domain controller for the domain isa.proxy.int could not be contacted. Ensure that the domain name is typed correctly...."

Question 2

How can I open port or do on the ISA Server to join on the AD Server

Question 3

Will Certificate Service be installed on the ISA Server or on the AD Server?

Here is my way to install Certificate Service

Insert Windows Server CD --> Start --> Settings --> Control Panel --> Add or Remove Programs --> Add/Remove Windows Components --> Enable "Certificate Service" --> diplays a warning
After installing Certificate Services, the machine name and the domain membership may be not changed due to the binding of the machine name to CA information stored in the Active Directory --> Yes

Question 4

Is that the right way to install Certificate Service? And whatelse should I do to be successfull.

Thank you for your help

Regards

Tri

Post #: 1

Featured Links*

RE: Certificate Service installs on ISA or AD? - 5.Oct.2007 6:44:24 AM

IanC

Posts: 239
Joined: 11.Jul.2007
From: UK
Status: offline

Hi Tri,

I can answer each question as follows:

1. By "join ISA Server on AD server", I assume you mean; do you need to join ISA server to a domain in order to obtain a certificate from your CA?. No, but best practice to do so.

Check your DNS settings and . . .

2. system policy configuration groups: DNS and Active Directory to ensure communication with a domain controller is successful.

3. Install Certificate Services on a member server rather than the ISA server.

_____________________________

Ian Currie

http://www.curriecomputing.com

Approved supplier - nAppliance(UK)
http://www.apdh64.dsl.pipex.com/currie/products.html
ISA Server 2006 SP1 3-day workshop
http://www.apdh64.dsl.pipex.com/currie/learning.html

(in reply to ngu_tri)

Post #: 2